SE517464C2 - Electromechanical key and lock device, locking system and method for updating authorization information - Google Patents

Abstract

A key and lock device comprises a key and a standalone lock. The key has an electronic circuitry with a first memory and a contact. The lock has electronic circuitry with a memory, and a contact arranged to co-operate with the key's first contact. A blocking mechanism is adapted to block operation of the lock unless an authorized key is inserted in the lock. The memory of the key stores a public identification item of the key identifying a group of keys having identical mechanical codes. In the memory of the lock, there is provided a list of the public and secret identification items of authorized keys and a list of the public identification item of non-authorized keys. A key is authorized if the public and secret identification items are present in the list of authorized keys and the public identification item thereof is absent in the list of non-authorized keys.

Description

25 30 35 517 NE .š_. "Ë" '~ Another purpose is to provide a locking system that is easy to create and maintain. Another object is to provide a key locking and locking device, where the assignment of keys is facilitated. Another purpose is to provide a locking system that is easy to adapt to market and customer requirements. Another purpose is to provide a locking system that differs significantly from other locking systems.

The invention in summary The invention is based on the insight that certain information elements or entries in an electronic key code ensure simple but still secure distribution and assignment of keys in a master key system.

According to the invention, a key and locking device according to claim 1 is provided.

A locking system according to claim 20 is also provided.

Furthermore, a method is provided for updating authorization information for a locking device in a locking system according to claim 25.

Several preferred embodiments are defined in the dependent claims.

A key and locking device and a locking system according to the invention are focused on the above-mentioned problems and disadvantages of known devices.

Brief Description of the Drawings The invention is described below in exemplary form with reference to the drawings, in which: moon o ou- 10 15 20 25 30 35 u a n | Fig. 1 Fig. 2 is an overall view of a locking system according to the invention; is a block diagram of a key and lock device according to the invention; Fig. 3 is a diagram showing the group principle used by the invention; Figs. 4a and 4b are diagrams showing information elements in a key and a lock, respectively, according to the invention; and Fig. 5 is a diagram showing an example of the distribution of locks in an office building.

Detailed Description of the Invention The following is a detailed description of preferred embodiments of the invention.

Locking system and tools A locking system comprising locking devices according to the invention will now be described with reference to Fig. 1, which shows the distribution of hardware and software tools among different hierarchical levels in a locking system, namely the customer 100, the distributor 200 and the manufacturer 300. the manufacturer, distributors and customers form the parts of the total locking system.

Each element, ie key, lock, etc., in the system belongs to one and only one master key system, this in order to maintain the high security levels required by today's locking system.

Software At each level, software is installed. There are three different types of software, one for each of the three levels: the manufacturer's software (M-software), the distributor's software (D-software) and the customer's software (C-software).

Each installed software maintains a database that contains information, such as encryption keys, etc. In the event that the communication encryption keys have to be changed, the manufacturer sends new keys that are encrypted with the current communication encryption key.

User keys In the customer system 100, there are several user keys 101, which are adapted to be used together with a number of locks 20.

Programming and Authorization Key There is at least one special programming and authorization key (C key) 102 for a customer system. A C-key can look like a normal key but has special properties. Like a normal user key, it includes a simple user interface, either a small monitor or a buzzer.

There is a defined routine and sequence to replace a lost C-key. This routine leads back to the factory for authorization.

The customer's programming box The customer's has a programming box 106, which is adapted for connection to a computer (PC) 104, for example via a serial interface. This programming box includes a static reader 107 and is used to program keys and locks in the customer system. A static reader is a key reader without a locking mechanism and thus contains electronic circuits, etc. for reading and programming a key.

Optionally, the programming box can be equipped with an internal power source and thus also function as a free-standing box, which works when it is disconnected from the computer.

Although a customer programming box is shown in the figure, this box can be omitted in very small locking systems.

The customer's software: now now 10 15 20 25 30 35 517 464 The customer has access to a personal computer 104, which runs customer administration software (C-software) with only open system information. Thus, the C software keeps track of which keys are authorized in which locks in the locking system in question. It also contains information regarding secret identities of all the keys in a system.

Authorization key for the distributor There is an authorization key (D-key) 202 for the distributor of the locking system, which can be a locksmith, for example. The function of this key is equivalent to that of the C key. However, the D-key has special authorization data for the special software with which it will be used. A D-key is also used as a protected communication bridge for all programming at distributor level.

Distributor's programming box At the distributor's there is a programming box 206, which is adapted to communicate with a computer (PC) 204, for example via a serial interface, such as an RS232C interface.

This programming box may be identical to that described in connection with the customer system 100.

Distributor's software The distributor has special computer software (D-software) for a personal computer 204. The D-software includes an open part for displaying open system information and for designing changes, etc. It also contains a secret part including authorization codes and secret keywords that are used in the system. The D-software also supports encrypted communication to the manufacturer's lock system computer 304 through, for example, a modem connection 208.

The D-software stores the secret identities of keys but not in plain text but in an encrypted format. However, the encryption keys are not stored with the D-software but are in the D-key. Thus, the D-key is required when reading the encrypted information. nov av 10 15 20 25 30 35 a u ø | no 517 464 The distributor's software can use a key / lock register as a module, which constitutes the customer system. In this way, the distributor can work transparently as if the distributor's and the customer's software were a system. This is necessary for the distributor if he will be intimately involved in customer service.

Manufacturer's key There is an authorization key (M-key) 302, which works in the same way as the D-key, but with authorization for the M-software, including all master key systems supplied by the manufacturer in question.

Manufacturer's Programming Box This is a programming box 306 that is similar to the distributor's programming box.

Manufacturer's software The manufacturer has access to a personal computer 304, which runs software (M-software) with full authorization for all operations.

The tools used create a flexible environment, which can be configured in a way that suits market conditions.

Authorization can be restricted or extended at different levels.

However, the manufacturer can always do everything that can be done. The distributor can never store secret codes himself, and the customer can not normally create a new or expanded system himself. The manufacturer can thereby check the authorization level for the distributor, and the distributor can check the system maintenance.

The above-mentioned tools together determine the possible functions of the various parts. In practice, the system can work in many different structures and arrangements. It all depends on to whom the various tools are distributed. This 10 15 20 25 30 35 .- n- .- 517 464 provides a flexible system, which can be adapted to a wide range of applications.

Key and lock electronics The following is a description of the key and lock electronics with reference to Fig. 2, which is a block diagram of a key and a lock.

The key, generally designated 101, includes an electronic circuit solution 110a having a microprocessor, timing circuits, etc. to execute the normal operations of a microcomputer arrangement. In particular, a memory circuit 10b is shown as being electrically connected to the electronics circuits.

This memory circuit is used to store information regarding the key, as will be explained below.

A contact 10c, which is located on the outside of the key 101, is also shown as being electrically connected to the circuit 101a.

The lock, generally designated 20, includes electronics circuits 20a having a microprocessor, timer circuits, etc. for executing the normal operations of a microprocessor arrangement. These circuits 20a are similar to the circuits 11a contained in the key. This is an advantage in that large-scale production reduces production costs.

A memory circuit 20b is shown as electrically connected to the electronics circuits 20a. This memory circuit is used for storing information regarding the lock and authorized keys, as will be explained below.

A contact 20c is located in the lock and is shown as electrically connected to the circuits 20a. This locking contact is arranged to cooperate with the key contact l01a to establish contact between the key electronics and the locking electronics. 10 15 20 25 30 35 v o o | oo There is also an electronically controlled locking mechanism 20d in the lock 20. This mechanism is controlled by means of drive circuits (not shown) and opens the lock as a result of an authorized key being identified in the lock.

GROUP PRINCIPLE The customer level 100 in a master key system, which was described in connection with Fig. 1, can be divided into different groups, and each user key 101 belongs to only one group. However, the groups can be defined according to several different rules, which will be described below.

Standard solution The standard solution is to have one key cut per individual door and one group per mechanical key cut. This solution is used in known locking systems and thus does not require any modification of the thinking to develop a new master key system. This provides a very secure but rather inflexible solution.

Organizational solution According to the organizational solution, a mechanical key cutting and a group are assigned to each "department" of the organization that uses the master key system.

Thus, in a typical company, the sales department, the research and development department, security guards, production department 1, production department 2, etc. are each assigned a specific group. This is illustrated in Fig. 3, which shows the customer level of a master key system according to the invention.

The advantage of this solution is that fewer different mechanical key cuts are required and provide greater flexibility in setting up the system. 10 15 20 25 30 35 517 464 A key cut, several groups According to this solution, only a few key cuts are made. As an example, all individual user keys on one floor, several floors or even the entire company have the same key cut. Furthermore, all master keys have the same key cut, sub-level 1 master keys have another, and sub-level 2 yet another.

Groups are then defined as in the organizational solution described in connection with Fig. 3.

This solution provides very few key cuts, resulting in a very flexible master key system.

The described solutions can of course be varied depending on special requirements for the system. For example, some small divisions can be divided into several groups. Alternatively, departments form a group. The way in which the group principle is used can also vary within an organization. An important feature, however, is that all keys in a group are mechanically identical, ie have identical key cuts. The reason for this will be described below.

INFORMATION ELEMENTS All keys and locks have a unique electronic identity or code, which consists of several information elements which control the function of the keys and locks. A key or lock information element will now be described with the aid of Figs. 4a and 4b, respectively.

The code is divided into different segments for the use of data from manufacturers, distributors, customers and individual keys, while a secret segment is available for secret information and is always individual for the group.

All keys and locks have a unique electronic code or identity. Each lock code consists of the following parts: 0 manufacturer's identity (M) o un. o. 10 15 20 25 30 35 51 7 464 _] _ 0_ 0 public lock ID (PLID) which includes 0 master key system identification (MKS) 0 function identification 0 group ID (GR) 0 unique identity (UI) 0 DES key 0 secret lock ID (SLID) which includes 0 secret group ID (SGR).

Correspondingly, each key code consists of the following parts: 0 manufacturer's identification (M) 0 open lock ID (PLID) which includes 0 master key system identification (MKS) 0 function identification 0 group ID (GR) 0 unique identity (UI) 0 DES- key 0 secret lock ID (SLID) which includes 0 secret group (SGR).

The basic elements will now be described in detail.

M - manufacturer M identifies the manufacturer of the master key system. In the description and examples of the invention below, this element is omitted because all keys and locks are assumed to have the same manufacturer.

MKS - master key system MKS identifies the different master key systems. A lock only accepts a user key or C key if it has the same MKS code. In the description and examples of the invention below, this element is omitted since all keys and locks are assumed to belong to the same master key system. 10 15 20 25 30 35 c I a> un n 517 464 _11 ..

F - function F identifies the role of the device; whether it is a lock, a user key, a C key, D key or M key.

GR group GR is an integer that identifies the group. GR is unique in each master key system and starts with l and is incremented by 1.

UID - unique identity UID identifies the different users in the group. UID is unique for each GR and starts with 1 and steps up with one.

DES DES consists of the same in a master key system. a randomly generated DES encryption key, DES can in no way be read from the outside and is used only by the algorithms, which are executed internally in the key and lock devices.

SGR - secret group SGR is a randomly generated number that is the same for a GR.

AUTHORIZATION TABLE In each lock there is an authorization table stored in the electronic memory. The authorization table determines which keys the lock in question must accept. The configuration and function will now be discussed.

The authorization table is divided into two parts, a list of authorized keys (A-list) and a list of unauthorized keys (NA list). A key is authorized if it is listed in the A-list but not in the NA-list. The A-list contains both PKID and SKID for authorized keys. However, the NA list contains only PKID and not SKID for unauthorized keys. __ 10 15 20 25 30 35 ø Q ø. nu a 517 464 _12 ..

A key is listed by its group or unique identity. In both cases it is determined by the PKID, the information elements GR-UID, which includes see Fig. 4a. To specify the unique identity, the values for both GR and UID are provided. However, if a group is to be specified, the UID value is given "0", since the UID value for individual keys can only have those that do not denote a specific key, the values "l", "2", "3" etc. For example, a PKID denotes 2 -0, ie GR = 2 and UID = 0, the whole group 2 in the main key system in question.

It is thus possible to authorize all the keys in a group in a lock by storing UID = 0 for the GR in question. With this solution, all keys in a group, regardless of their UID, are set so that they are not included in the NA list. This makes it authorized to open the lock during pre- possible to make a new key with new UID, which works directly in the lock without having to reprogram the lock.

As already mentioned, when a key is listed on the A-list, the secret key identity SKID is also stored. This SKID is the same for all keys in a group and is used for security reasons. It is not possible to read SKID from the keys or locks without having fulfilled certain verification procedures by means of a C-key, as will be discussed below.

If an entire group is authorized in the manner described above, it is possible to restrict the authorization of one or more of the keys in that group by including their PKID in the NA list of the lock.

An example of organizational grouping and authorization now follows with references to Fig. 5, where an office building schematically showing an R&D department and a sales department is shown. The entire building belongs to a master key system 1, ie MKS = 1 for all keys and locks. There are a total of seven doors in the office, of which 10 15 20 25 517 464 "_13- three belong to the R&D department: R & D1, R & D2 and LAB, two belong to the sales department, SELL and SELL2, and two are common, MAIN and COMMON. Four people work in the office, two in the R&D department, researchers 1 and 2, and two in the sales department, salesmen 1 and 2.

The master key system is divided into two electronically coded groups GR = 1 (R&D) and GR = 2 (SELL) with two keys in each group. The keys' PKID is presented in table 1 below: Table 1a group of users PKID (GR-UID) 1 researcher 1 1-1 1 researcher 2 1-2 2 salesmen 1 2-1 2 salesmen 2 2-2 The authorization tables for the various doors are presented in table 2.

Table 2a HEAD. Ram Rauz LAB GEMENs. SELL 1 SELL 2 NA A NA A NA A NA NA A NA A NA -o 1-1 1-2 1-0 1-o 2-1 2-2 In common doors, whole groups are listed in the A-list, and in private doors are only specific approved keys listed in the A-list.

With this configuration, all four employees are let in through the main entrance door and into the common room. Only the researchers are allowed into the lab. Only the person who works there has access to each of the four staff rooms. 10 15 20 25 517 464 _14- If one of the employees leaves and is replaced by another, new keys must be handed out and the locks must be reprogrammed.

Assume that researcher 1 quits without having returned his keys, and that he is replaced by researcher 3. The identities of the keys handed out will then look like in table lb: Table lb group of users PKID (GR-UID) 1 researcher 1 1-1 1 researcher 2 1-2 1 researcher 3 1-3 2 salesmen 1 2-1 2 salesmen 2 2-2 Access to the office must be denied to researchers l and instead given to researchers 3. PKID for the researcher's 1 key is therefore added to all locks where researcher 1 was authorized. PKID for the researcher's 3 key must be added to his private room. The authorization tables will then look like in table 2b: Table 2b HEAD. R & D1 R & D2 LAB COMMON. SELL 1 SELL 2 A N A A N A A N A A NA NA A NA A NA - 1-1 - 1-1 1-2 1-o 1-1 1-0 1-1 2-1 2-2 Additions in relation to table 2a marked in bold.

It is thus very easy to make the necessary changes to the locks in the master key system.

It is recognized that if there are identical entries in the A and NA lists, both can be deleted to save memory. 10 15 20 25 30 35 517 464 v an. o. _15 ..

The electronic coding can also be supplemented with mechanical coding. In this example, there are only two mechanical intersections, MCl and MC2, because there are only two electronically coded groups, and the mechanical coding must be the same within a group.

DEFINED OPERATIONS Below is an overview of the various operations in the system. To begin with, the original master key system is created and programmed by the manufacturer using the manufacturer's software 304. This initial system includes one or more C keys 102. Complete information about the created system is stored in the M software 304.

There are a number of defined operations with their separate rules. The possible operations are listed below: 0 add key 0 add C key 0 replace C master key 0 delete key 0 delete C key 0 authorize key 0 lock key 0 read transaction track 0 read key list 0 test 0 read user register 0 update user register Control commands for programming device: 0 review programming transaction track 0 review test results 0 review key list from a lock 0 review transaction track list from a lock 0 identify the lock 0 delete assignment 0 delete key list 10 15 20 25 30 35 517 464 _16- ø c In uv: a 0 delete transaction track list 0 delete programming transaction tracklist 0 delete all Status data: 0 assignments activated in a C-key 0 assignments performed for a lock 0 etc.

Q operation to key A key is added to the number of authorized keys by adding its PKID and SKID to the A-list.

Q delete key operation To delete a key's authorization, delete the key's PKID and SKID from the A-list. This is called an ironing operation. In the future, the key is not authorized, and to make it authorized, the add operation must be performed again.

The operation excludes key As already mentioned, when a key or group is authorized in a lock, its SKID is also stored in the lock's A-list. It is possible to instruct a lock to copy PKID to the NA list and leave PKID and SKID in the A list. In this case, the lock does not open for the key in question because the lock does not open for a key on the NA list even if it is in the A-list. This operation of copying PKID to the A-list is called an exclusion operation.

The re-authorization key operation If a lock-out operation has been performed on a key, it is possible to re-authorize the key without having its SKID, ie without access to the key itself. All you have to do is delete PKID from the NA list. This operation is called a re-authorization operation. v u .nu g. 10 15 20 25 30 35 n u n u nu 517 464 - _ 17 _ The combination of lock-out and re-authorization operations is useful when a key is to be re-authorized without having access to the key. This means that a key's PKID and SKID must be entered in the A-list only once. Thereafter, the exclusion or re-authorization operations are performed.

The replacement key operation The replacement operation makes it possible to manufacture a key, which notifies all locks in which the key has been inserted that it replaces a specific key. This operation can only be performed in locks in which the replaced key was authorized. The operation checks that the previous key is in the A-list and not in the NA-list. It then places the PKID for the replaced key in the NA list.

With this operation, reprogramming is performed automatically.

This is especially useful when a key has been lost.

The operation of creating an installer key In the initial stages of creating a locking system, a so-called "installer key". This is just a normal user key with authorization for all locks in the system and is used during installation. It must be locked after use just like a "lost" key.

C-KEYS A C-key belongs to a master key system but has a special code, which informs that it is a C-key.

It also has a PKID but cannot affect locks as a user key. There is always a C master key with a special GR code. This is the first C-key.

For security reasons, C-keys are used to add and delete entries on a lock A-list or NA-list. In each lock, the identities of all C-keys, which are permitted to make changes to the authorization tables, are registered in the A-list. Therefore, it is possible to modify 10 15 20 25 30 35 517 454 _18 privileges for different C-keys in different locks. However, the C keys do not contain any information about the user keys.

The C master key is used to change the authorization of the C keys. The C master key is registered in all locks in a master key system. The C master key is also allowed to make changes to user key authorizations.

The C keys are also used to ensure the security of data stored in the C software. In combination with a user-entered PIN code, a C-key enables reading of encrypted data in the C-software.

If a C key is lost, authorizations can be changed using the C master key. If the C master key is lost, the manufacturer delivers a new C master key. By means of this new C master key and the replacement operation, the lost C master key can be replaced in all locks in the master key system and in the C software.

Using C-keys A C-key can be used in various ways to program locks in a master key system. Below, various ways of programming locks will be described, in part with reference to Fig. 1.

Operations with the C software The software in a locking system keeps track of the locks, the keys and their authorizations. If a modification is desired, this is performed in the C-software of the customer computer 104 and is then downloaded to the C-key by means of the programming box 106, which is connected to the computer. The procedure for the lock is then as follows: The C-key is then inserted into a lock 20, where modifications are desired for a specified time interval, and the new information is transferred from the C-key to the lock 20. 10 15 20 25 30 35 517 464 'fu : nu v: _19- When using the C-software, the information records regarding the updated user key are thus added from the C-software, stored in the C-key and added to the lock.

When an operation has been performed correctly for a specific lock, this is written to the C key. It is then possible to update the system status in the C software database, which describes the system. In this way, the current status of the master key system is always stored in the C software.

Operations with a programmer If the C software is not available, it is possible to change the authorization table for a lock by using a C key and a programmer. This programming device may be the box 106 described above, which operates disconnected from the computer 104. Alternatively, it is a portable box specially designed for this purpose (not shown in the figures) which is provided with a monitor and a keyboard.

As an alternative, you can sometimes use a cheap programming device instead of the usual programming box. With this low-cost alternative, it is only possible to perform the operations strike, exclude and re-authorize.

To perform the add operation, an authorized C-key, a programmer and the key are required.

The key is needed because its SKID is required in the A-list. The C-key can be either a separate key that is inserted in the box or is integrated in the box. An additional operation is then selected from a menu, and this information is then transferred to the lock.

It is also possible to perform other operations in a similar manner, such as authorizing an entire group with a 10 15 20 25 30 35 517 464 sgsjj-a; w; - 1 av a nunnan a n 1 unted ca -annan u »us 1 - - _ none _20 .. such a solution by having a key in this group, since all keys in the group have the same SKID.

To perform an ironing operation, an authorized C-key and a programming device are required. By means of the programming device, PKID is scanned for keys in the A and NA lists, and the key to be deleted is selected.

The key to be deleted is not required as it is possible to place the PKID for an authorized user key in the NA list and delete its PKID and SKID from the A list without the user key being present.

Thus, when using a programming device, the information records regarding the updated user key authorizations are supplied from the user key directly to the lock.

Operations without any programming device With only a C-key and a user key, it is possible to change the authorization of a user key in a lock.

First, the C key is inserted into the lock for a specified period of time. Then the user key is inserted into the lock. Then the C key is inserted back into the lock to confirm the update. Depending on the desired operation, the C key is inserted for different periods of time.

It is possible to remove all keys from the A-list. It is not possible to delete a single lost key from the A-list without deleting all the keys on the list. However, it is possible to remove a key from the A-list if the key is present together with an authorized and programmed C-key.

The replacement operation can be performed without any programming box. With a new key, a lost key can thus be replaced by means of the replacement operation. 10 15 20 25 30 35 517 464 _ 21 _ As when using a programming device, the information records regarding the updated user key authorizations are supplied from the user key and directly to the lock.

Other possible operations with a C-key It is possible to give a C-key some functions to perform, when used together with a lock. It is possible to give a C-key the function to add or delete specific keys in the authorization table. Thus, when a number of new keys are issued, it is possible for the manufacturer to provide a C key together with the new keys, which works to authorize all the new keys in some or all of the locks in a system. This would greatly simplify the authorization procedure.

It should be noted that there is no connection between the GR code of user keys and C keys. However, it is possible to limit the use of C-keys to specific groups in a locking system.

D-keys and M-keys D-keys (and M-keys) are used in the same way as C-keys. Some operations require a D-key. When, for example, locks or keys are to be added to the system at the distributor, the D-software 204 authorized by the D-key 202 is used together with the download of the required secret information from the M-software 304. The M-key is required when using M software.

The lock is then programmed at the customer either using the C-key 102 or by means of an adapter, which connects the programming box 106 and the lock 20.

A preferred embodiment of a key and lock device has been described. It will be appreciated that this may be varied within the scope defined by the claims. Thus has certainly- now. A cylinder locking device has now been described, but the invention is likewise applicable to other types of locks, such as card locks.

An embodiment has been described in which both an open information record and a secret information record are stored in the A-list and the open information record in the NA list, but this may vary. For example, it is thus quite possible to store only open or only secret information items in both lists or some other combination thereof.

Claims (21)

10 15 20 25 30 35 517 464 _23- Patent claim An electromechanical key and locking device comprising: - a key (101) having a mechanical code and a key electronics circuit (101a) having - a key memory means (10b) adapted to store an open identification record (PKID) for the key, and - a key contact means (l0lc); and - a stand-alone lock (20), having a locking electronic circuit (20a) having I - a locking memory means (20b) and - a locking contact means (20c) arranged to cooperate with the key contact means (101c) and - a locking mechanism (20d), adapted to block the operation of the lock unless an authorized key is inserted in the lock, characterized in that - the open identification record (PKID) of the key includes a group identification record (GR), which identifies a group of keys having identical mechanical codes, and - that the locking means (20b) is adapted to store - a list of the open identification record (PKID) and a secret identification record (SKID) for authorized keys, and - a list of the open identification record (PKID); for unauthorized keys, whereby a key is authorized if its open and secret identification records are in the list of authorized keys, and its open identification record is not in the list of unauthorized new keys cklar. The locking and keying device according to claim 1, wherein the keying and locking memory means (10b, 20b) are arranged to store an electronic code field containing the open identification record (PKID, PLID), the secret 10 15 20 25 30 35 517 464 _ 24 _ now. oo the identification record (SKID, SLID) and an encryption key (DES). A key and locking device according to claim 1 or 2, wherein the open identification record (PKID, PLID) comprises a function identification record (F), which identifies one of the following functions: user key, user authorization key, distributor authorization key, manufacturer key key and . A key and locking device according to any one of claims 1-3, wherein the open identification record (PKID, PLID) comprises a device identification record (UID), which identifies the different devices in a group, the device identification record being unique in each group. A key and lock device according to any one of claims 1-4, wherein the secret identification record (SKID, SLID) is identical for all devices in a group. A key and lock device according to any one of claims 1-5, wherein an open identification record (PKID), which is stored in the list of authorized keys or the list of unauthorized keys and comprises a device identification record (UID) with specific value, denotes a whole (group. A key and locking device according to any one of claims 1-6, wherein the secret identification record (SKID), which is stored in the key memory means, can only be read by means of a special authorization key. A key and locking device according to any one of claims 1-7, wherein a key is added to the number of authorized keys by adding its open and secret identification items (PKID, SKID) to the list of authorized keys. 10 15 20 25 30 35 517 464 '_25- A key and locking device according to any one of claims 1-8, wherein a key is removed from the number of authorized keys by removing its open and secret identification records (PKID, SKID) from the list of authorized keys. A key and locking device according to any one of claims 1-9, wherein a key is removed from the number of authorized keys by adding its open identification record (PKID) to the list of unauthorized keys. A key and locking device according to claim 10, wherein a key is added to the number of authorized keys by removing its open identification record (PKID) from the list of unauthorized keys. A key and locking device according to any one of claims 1-11, wherein a first key of the number of authorized keys is replaced by a second key by checking whether the first key is authorized, its open identification entry being added to the list of unauthorized keys and that the open and secret identification records of the other key are added to the list of authorized keys. A key and lock device according to any one of claims 1-12, wherein a master authorization key is registered in the authorized list of all locks in the master key system. Locking system characterized by key and locking devices according to one of the preceding claims. A locking system according to claim 14, wherein a customer database (C-software) keeps track of which keys are authorized in which locks in the locking system. A locking system according to claim 14, wherein a distributor database (D-software) contains a key part / lock register, which has an open part for displaying open system information for designing changes, and a secret part containing authorization codes and secret keywords, which are used in the system. A locking system according to claim 14, wherein at least one authorization key (C-key) is used for programming the locking devices, this or these authorization keys being authorized to update the information stored in the locking means means of the locking devices. Method for updating authorization information of a locking device in a locking system according to any one of claims 14-17, characterized by the step of updating the information in the second memory means of the locking device. Method according to claim 18 when it is subordinate to any of claims 15 or 16, comprising the following steps: - transferring update information from the customer or distributor database (C-software, D-software, M-software) to an authorization key (C-key, D-key, M-key), and - to transfer update information from the authorization key to the locking device of a locking device. A method according to claim 18, comprising the steps of: - instructing an update operation by inserting an authorization key into the lock, and - transmitting update information from a user key to the locking means of the locking device. A method according to any one of claims 18-20, comprising the further steps: - verifying the update operation by inserting the authorization key into the lock, and - transferring verification information from the authorization key to the customer or distributor database.